.NET news » Search results

Use CSharp to manage IIS

This article describes how Http modules and handlers are to be written and configured in IIS 7.5

While certain HTTP Headers are necessary, the web server's identifying HTTP Headers are not necessary. Their inclusion inflates each HTTP response by around 100 bytes. Granted, 100 bytes is not much when taken alone, but when taken in the context of thousands or millions of requests over the course of time, those 100 bytes add up. Furthermore, providing identifying information can pose a security risk. An attacker who knows of a vulnerability in a particular web server and ASP.NET version combination could hunt for targets making HTTP requests to many different servers and flagging those that return the particular web server/ASP.NET version numbers.

This article looks at how to remove these identifying HTTP Headers in both IIS 6 and IIS 7.

Learn how to install and run your ASP.NET applications on systems without IIS in three easy steps.